adding the real api (quick bootstrap + serving apicalls at /api/. need to do AUTH now, and makefile/debian package
This commit is contained in:
Benjamin Sonntag
parent
bde156f63d
commit
62ec561374
|
|
@ -0,0 +1,9 @@
|
||||||
|
|
||||||
|
# apache configuration to add the API at /api/ in any panel
|
||||||
|
# put this into /etc/alternc/apache-panel.d
|
||||||
|
|
||||||
|
RewriteEngine On
|
||||||
|
|
||||||
|
RewriteCond %{REQUEST_FILENAME} !-f
|
||||||
|
RewriteRule /api/(.*) /api/index.php [L]
|
||||||
|
|
||||||
|
|
@ -0,0 +1,86 @@
|
||||||
|
<?php
|
||||||
|
|
||||||
|
|
||||||
|
/* Global variables (AlternC configuration) */
|
||||||
|
require_once(__DIR__."/../../class/local.php");
|
||||||
|
|
||||||
|
// Define constants from vars of /etc/alternc/local.sh
|
||||||
|
// The you can't choose where is the AlternC Panel
|
||||||
|
define('ALTERNC_MAIL', "$L_ALTERNC_MAIL");
|
||||||
|
define('ALTERNC_HTML', "$L_ALTERNC_HTML");
|
||||||
|
if(isset($L_ALTERNC_LOGS_ARCHIVE))
|
||||||
|
define('ALTERNC_LOGS_ARCHIVE', "$L_ALTERNC_LOGS_ARCHIVE");
|
||||||
|
define('ALTERNC_LOGS', "$L_ALTERNC_LOGS");
|
||||||
|
define('ALTERNC_PANEL', "/usr/share/alternc/panel");
|
||||||
|
define('ALTERNC_LOCALES', ALTERNC_PANEL."/locales");
|
||||||
|
define('ALTERNC_LOCK_JOBS', '/var/run/alternc/jobs-lock');
|
||||||
|
define('ALTERNC_LOCK_PANEL', '/var/lib/alternc/panel/nologin.lock');
|
||||||
|
|
||||||
|
/* PHPLIB inclusions : */
|
||||||
|
$root=ALTERNC_PANEL."/";
|
||||||
|
|
||||||
|
require_once($root."class/db_mysql.php");
|
||||||
|
require_once($root."class/functions.php");
|
||||||
|
require_once($root."class/variables.php");
|
||||||
|
|
||||||
|
|
||||||
|
global $L_MYSQL_HOST,$L_MYSQL_DATABASE,$L_MYSQL_LOGIN,$L_MYSQL_PWD;
|
||||||
|
|
||||||
|
class DB_system extends DB_Sql {
|
||||||
|
var $Host,$Database,$User,$Password;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Creator
|
||||||
|
*/
|
||||||
|
function DB_system() {
|
||||||
|
global $L_MYSQL_HOST,$L_MYSQL_DATABASE,$L_MYSQL_LOGIN,$L_MYSQL_PWD;
|
||||||
|
$this->Host = $L_MYSQL_HOST;
|
||||||
|
$this->Database = $L_MYSQL_DATABASE;
|
||||||
|
$this->User = $L_MYSQL_LOGIN;
|
||||||
|
$this->Password = $L_MYSQL_PWD;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// we do both:
|
||||||
|
$db= new DB_system();
|
||||||
|
$dbh = new PDO("mysql:host=".$L_MYSQL_HOST.";dbname=".$L_MYSQL_DATABASE, $L_MYSQL_LOGIN,$L_MYSQL_PWD,
|
||||||
|
array(PDO::MYSQL_ATTR_INIT_COMMAND => "SET NAMES UTF8;")
|
||||||
|
);
|
||||||
|
|
||||||
|
|
||||||
|
// Current User ID = the user whose commands are made on behalf of.
|
||||||
|
$cuid=0;
|
||||||
|
|
||||||
|
$classes=array();
|
||||||
|
/* CLASSES PHP : automatic include : */
|
||||||
|
$c=opendir($root."class/");
|
||||||
|
while ($di=readdir($c)) {
|
||||||
|
if (preg_match("#^m_(.*)\\.php$#",$di,$match)) { // $
|
||||||
|
$name1="m_".$match[1];
|
||||||
|
$name2=$match[1];
|
||||||
|
$classes[]=$name2;
|
||||||
|
require_once($root."class/".$name1.".php");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
closedir($c);
|
||||||
|
/* THE DEFAULT CLASSES ARE :
|
||||||
|
dom, ftp, mail, quota, bro, admin, mem, mysql, err
|
||||||
|
*/
|
||||||
|
|
||||||
|
|
||||||
|
/* Language */
|
||||||
|
//include_once("../../class/lang_env.php");
|
||||||
|
|
||||||
|
$mem=new m_mem();
|
||||||
|
$err=new m_err();
|
||||||
|
$authip=new m_authip();
|
||||||
|
$hooks=new m_hooks();
|
||||||
|
|
||||||
|
|
||||||
|
for($i=0;$i<count($classes);$i++) {
|
||||||
|
$name2=$classes[$i];
|
||||||
|
if (isset($$name2)) continue; // for already instancied class like mem, err or authip
|
||||||
|
$name1="m_".$name2;
|
||||||
|
$$name2= new $name1();
|
||||||
|
}
|
||||||
|
|
||||||
|
|
@ -0,0 +1,103 @@
|
||||||
|
<?php
|
||||||
|
|
||||||
|
/**
|
||||||
|
* multiple call-mode API for Alternc
|
||||||
|
* you can call this HTTP(s) API as follow:
|
||||||
|
* from the base url https://panel.example.fr/api/
|
||||||
|
* 1. /api/post use GETted data (?token=xx&object=xx&action=yy&option1=value1&option2=value2
|
||||||
|
* 2. /api/post use POSTED data using the same keys
|
||||||
|
* 3. use a sub-url (rest-style) of the form /api/rest/object/action?token=xx&option1=value1&option2=value2
|
||||||
|
* 4. the same (REST) but options and value are POSTED
|
||||||
|
*
|
||||||
|
* the json-object contains:
|
||||||
|
* ->object = the Alternc_Api_Object_<classname> to call
|
||||||
|
* ->action = the method to call in this class
|
||||||
|
* ->options = an object passed as it is while calling the method.
|
||||||
|
*
|
||||||
|
*/
|
||||||
|
|
||||||
|
|
||||||
|
// bootstrap AlternC
|
||||||
|
require_once("bootstrap.php");
|
||||||
|
|
||||||
|
// Which api method is used ?
|
||||||
|
define("API_CALL_GET", 1 );
|
||||||
|
define("API_CALL_POST", 2 );
|
||||||
|
define("API_CALL_POST_REST", 3 );
|
||||||
|
define("API_CALL_GET_REST", 4 );
|
||||||
|
|
||||||
|
// TODO : __autoload of classes ?
|
||||||
|
|
||||||
|
function apicall($data,$token,$mode) {
|
||||||
|
global $dbh;
|
||||||
|
$options["databaseAdapter"]=$dbh;
|
||||||
|
$options["loginAdapterList"]=array("sharedsecret","login");
|
||||||
|
// TODO (no loggerAdapter PSR3-Interface-compliant class as of now)
|
||||||
|
try {
|
||||||
|
|
||||||
|
$service=new Alternc_Api_Service($options);
|
||||||
|
|
||||||
|
$response = $service->call(
|
||||||
|
new Alternc_Api_Request($data)
|
||||||
|
);
|
||||||
|
|
||||||
|
header("Content-Type: application/json");
|
||||||
|
echo $response->toJson();
|
||||||
|
exit();
|
||||||
|
|
||||||
|
} catch (Exception $e) {
|
||||||
|
// something went wrong, we spit out the exception as an Api_Response
|
||||||
|
// TODO : Don't do that on production! spit out a generic "fatal error" code and LOG the exception !
|
||||||
|
header("Content-Type: application/json");
|
||||||
|
$response=new Alternc_Api_Response(array("code" => $e->code, "message" => $e->message));
|
||||||
|
echo $response->toJson();
|
||||||
|
exit();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
// Authentication is done by asking for /api/auth/<method>?option1=value1&option2=value2
|
||||||
|
// or POSTED data
|
||||||
|
// a token is returned for this session
|
||||||
|
|
||||||
|
// We support 4 api calls methods:
|
||||||
|
|
||||||
|
if ($_SERVER["REQUEST_URI"]=="/api/post") {
|
||||||
|
// simple ?q or POST of json data
|
||||||
|
if ($_SERVER["REQUEST_METHOD"]=="POST") {
|
||||||
|
$data=array("options" => $_POST,
|
||||||
|
"object" => $_POST["object"],
|
||||||
|
"action" => $_POST["action"],
|
||||||
|
);
|
||||||
|
$token=$_POST["token"];
|
||||||
|
apicall($data,$token,API_CALL_POST);
|
||||||
|
exit();
|
||||||
|
} else {
|
||||||
|
$data=array("options" => $_GET,
|
||||||
|
"object" => $_GET["object"],
|
||||||
|
"action" => $_GET["action"],
|
||||||
|
);
|
||||||
|
$token=$_GET["token"];
|
||||||
|
apicall($data,$token,API_CALL_GET);
|
||||||
|
exit();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
if (preg_match("#^/api/rest/([^/]*)/([^/]*)/?#$",$_SERVER["REQUEST_URI"],$mat)) {
|
||||||
|
if ($_SERVER["REQUEST_METHOD"]=="POST") {
|
||||||
|
$data=array("options" => $_POST,
|
||||||
|
"object" => $mat[1],
|
||||||
|
"action" => $mat[2]
|
||||||
|
);
|
||||||
|
$token=$_POST["token"];
|
||||||
|
apicall($data,$token,API_CALL_POST_REST);
|
||||||
|
exit();
|
||||||
|
} else {
|
||||||
|
$data=array("options" => $_GET,
|
||||||
|
"object" => $mat[1],
|
||||||
|
"action" => $mat[2]
|
||||||
|
);
|
||||||
|
$token=$_GET["token"];
|
||||||
|
apicall($data,$token,API_CALL_GET_REST);
|
||||||
|
exit();
|
||||||
|
}
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue